System Integration Engineer II

Are you searching for an IT Position with a growing company that makes a difference? We are looking for a S ystem Integration Engineer II to join our team!

Onco360 Pharmacy is a unique oncology pharmacy model, created to serve the needs of community, oncology and hematology physicians, patients, payers, and manufacturers. Our Onco360 Corporate Office in Louisville, Kentucky has an immediate need for a S ystem Integration Engineer II.

We offer a competitive salary starting at $82K and company benefits!

Benefits

• Medical, Dental & Vision insurance
• 401k with a match
• Paid Time Off and Paid Holidays
• Tuition Reimbursement
• Paid Volunteer Day
• Floating Holiday
• Referral Incentive
• Paid Life, and short & long-term disability insurance
  
  

Summary

The System Integration Engineer is responsible for the design, implementation, and lifecycle management of secure data-exchange platforms and identity-integration services.

This role ensures the secure transfer of business-critical data via SFTP and AS2 while managing Single Sign-On (SSO) integrations and Identity Provider (IdP) configurations. The engineer will serve as a subject-matter expert to ensure that external partners and internal systems communicate through hardened, encrypted, and identity-verified channels.

Major Responsibilities

Secure Data Exchange & MFT

• Architect & Support: Design, implement, and maintain enterprise-grade MFT platforms (e.g., GoAnywhere, Cerberus, Cleo, IBM Sterling) to support SFTP, AS2, and HTTPS protocols.
• B2B Onboarding: Provision and manage complex partner connections, including authentication logic, directory structures, and automated routing workflows.
• AS2 Management: Oversee AS2 configurations, including synchronous/asynchronous MDNs, digital signatures, and payload encryption.
• Encryption Standards: Enforce high-standard security controls, including SSH, TLS 1.3, and PGP encryption for data at rest and in transit.
  
  

Identity & SSO Integration

• SSO Implementation: Lead the integration of internal and third-party applications with Identity Providers (e.g., Azure AD/Entra ID, Okta) using SAML 2.0, OIDC, and OAuth 2.0.
• MFT Identity Hardening: Secure the MFT management console and user portals by implementing Multi-Factor Authentication (MFA) and SSO-based administrative access.
• User Provisioning: Develop and maintain automated user provisioning/deprovisioning workflows using SCIM or custom scripting to ensure access aligns with the Principle of Least Privilege.
• Access Governance: Define and audit Role-Based Access Control (RBAC) policies for data exchange folders and integration platforms.
  
  

Security Operations & Engineering

• Certificate Lifecycle: Own the end-to-end management of digital certificates (SSL/TLS, AS2, PGP), including automated renewal, rotation, and vaulting.
• Automation: Develop "Infrastructure as Code" style automation for partner onboarding and SSO app registrations using PowerShell, Python, or Terraform.
• Monitoring & Response: Establish proactive monitoring for connection failures, identity anomalies, and performance bottlenecks; serve as Tier 3 support for complex integration outages.
• Compliance & Auditing: Support GxP, HIPAA, and PCI-DSS audits by providing detailed logs, workflow documentation, and evidence of security hardening.
• Perform other tasks as assigned.
• Conducts job responsibilities in accordance with the standards set out in the Company’s Code of Business Conduct and Ethics, its policies and procedures, the Corporate Compliance Agreement, applicable federal and state laws, and applicable professional standards.
  
  

Education/Learning Experience

Required: Bachelor's degree in IT, Computer Science, or a related field (or equivalent experience)

Desired: Masters’s degree in IT, Computer Science, or related field

Work Experience

• Required: 5 years in Security Engineering, Identity Management, or B2B Integration in a mid to large enterprise. Proven experience configuring SAML/OIDC integrations and managing enterprise MFT solutions.
• Desired: Experience in pharmaceutical and healthcare IT environments
  
  

Skills/Knowledge

• Required: Advanced expertise in SFTP, AS2, HTTPS, SAML, OIDC, and OAuth. Deep understanding of IdP mechanics, claim transformations and MFA implementation. Expert level knowledge of PKI, certificate chains, SSH key management and PGP. Solid grasp of DNS, firewall rules (NAT/PAT), load balancing (F5/Azure ALB), and WAFs. Proficiency in PowerShell or Python for automating security tasks and API interactions.
• Desired: Familiarity with CPR , IPS, or other pharmacy-related systems. Familiarity with Cloud computer platforms (Azure, AWS, or Google Cloud). Experience implementing and maintaining security best practices for endpoint management. Understanding of HIPAA compliance and disaster recovery planning. Database and scripting experience.
  
  

Licenses/Certifications

Required: CISSP, Security , or GIAC (GSEC). Microsoft certified: Identity and Access Administrator (SC-300). Certified Professional in GoAnywhere, Cerberus, Cleo, or similar MFT platforms.